CVE-2020-15334

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file...

CVE-2020-15334

Zyxel CloudCNM SecuManager is affected in versions 3.1.0–3.1.1 by an escape-sequence injection into the /var/log/axxmpp.log file. The issue relates to the API endpoint handling that log file; the exact vulnerable parameters are not specified in the documents. No explicit exploit details or in-the...

CVE-2020-15335

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 are affected by an authentication bypass in /registerCpe requests, enabling likely unauthorized access. The CVE entry (CVE-2020-15335) is rated with CVSS v3.1 base score 7.5 (HIGH) and CVSS v2 base score 5.0 (MEDIUM). Documented impact indicates no authe...

CVE-2020-15335

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests...

CVE-2020-15336

Zyxel CloudCNM SecuManager (3.1.0 and 3.1.1) exposes /cnr endpoints without authentication, enabling unauthorized access. Red Hat and CNVD/CVE listings concur on an authentication bypass affecting these versions. The CVSS details indicate network-accessible, unauthenticated access with high integ...

CVE-2020-15336

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests...

CVE-2020-15337

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests...

CVE-2020-15337

Zyxel CloudCNM SecuManager versions 3.1.0–3.1.1 have a vulnerability where the GET method is used with sensitive query strings to the /registerCpe endpoint. This could expose sensitive information via the query string. Affected product: Zyxel CloudCNM SecuManager (versions 3.1.0 and 3.1.1). Root ...

CVE-2020-15338

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests...

CVE-2020-15338

CVE-2020-15338 affects Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1. The issue is “Use of GET Request Method With Sensitive Query Strings” on /cnr, exposing sensitive information via GET parameters. The CVE lists a MEDIUM base score (CVSS 3.1: AV Network, AC Low, PR None, UI None, C I Low). Practic...

CVE-2020-15339

CVE-2020-15339 affects Zyxel CloudCNM SecuManager, specifically versions 3.1.0–3.1.1. Multiple connected sources corroborate a cross-site scripting (XSS) vulnerability in the endpoint /CPEManager/AXCampaignManager/handle_campaign_script_link?script_name=, arising from the handle_campaign_script_l...

CVE-2020-15339

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handlecampaignscriptlink?scriptname= XSS...

CVE-2020-15340

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/defaultaxess/axess/TR69/Handlers/turbolink/sshkeys/idrsa SSH key...

CVE-2020-15340

Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1 are affected by a hardcoded SSH key located at opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa. The issue arises from embedding credentials used in TR-069 handling, enabling potential unauthorized access if exploite...

CVE-2020-15341

CVE-2020-15341 affects Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1. The vulnerability is an unauthenticated access issue in the update_all_realm_license API, enabling potential unauthorized operations. Public sources in the connected documents confirm an unauthenticated endpoint as the ro...

CVE-2020-15341

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated updateallrealmlicense API...

CVE-2020-15342

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zyinstalluser API...

CVE-2020-15342

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 expose an unauthenticated API endpoint, zy_install_user, enabling unauthorized access. Root cause: unauthenticated API call in the system. Impact: unauthorized actions on SecuManager (per the PT Security entry; no explicit CVSS details in provided docs)....

CVE-2020-15343

The CVE-2020-15343 entry concerns Zyxel CloudCNM SecuManager, with affected versions 3.1.0 and 3.1.1. The root cause is an unauthenticated API endpoint (zy_install_user_key) that allows unauthorized access. Documented impact indicates unauthorized use of the API, which could enable configuration ...

CVE-2020-15343

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zyinstalluserkey API...